$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa File: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (raw, json) Hash identifier: zg5vSiA3/QN7bcIdzKLkKGnJsaulOgSMw7ad8ij4yQk= Subject key identifier: 85:A3:79:73:09:1D:BE:F5:20:DE:D7:2A:0D:63:06:3C:A1:1D:79:65 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 685FC61E33798E6F067BF206ACFE93E6018273D1 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa Signing time: Wed 03 Jul 2024 05:00:00 +0000 ROA not before: Wed 03 Jul 2024 04:55:00 +0000 ROA not after: Wed 02 Jul 2025 05:00:00 +0000 asID: 23949 IP address blocks: 202.150.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5f:c6:1e:33:79:8e:6f:06:7b:f2:06:ac:fe:93:e6:01:82:73:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Jul 3 04:55:00 2024 GMT Not After : Jul 2 05:00:00 2025 GMT Subject: CN=85A37973091DBEF520DED72A0D63063CA11D7965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:c0:5c:e3:d5:11:d1:3c:d2:6b:ad:10:3f: 8f:de:57:67:bb:c5:7e:b4:da:ad:02:08:82:ca:f8: 69:17:bf:1a:d5:67:63:7c:4d:3b:69:ad:c8:ae:0d: b9:4a:0a:72:54:90:a9:84:61:14:6f:40:48:76:4f: d6:64:82:49:64:63:67:fc:52:c5:4b:d6:68:71:e2: 7e:e5:a3:f2:de:98:b2:85:67:25:6b:04:d4:69:b9: 8e:0a:e2:d6:b9:94:40:66:c2:a2:25:2a:6e:cb:2d: 88:fa:59:83:08:16:42:ee:6b:48:0e:f1:92:80:f2: 90:6a:ac:ab:5b:80:bd:f1:49:a7:21:df:85:9f:e0: d7:6e:ad:2c:1f:9e:c8:22:05:53:69:6d:fc:ba:a0: 03:16:1a:3d:09:1f:30:93:b8:89:d1:05:a5:41:4c: 8e:e8:4b:3b:f8:9d:e7:b6:62:88:fe:5c:14:ff:f7: f3:82:33:4e:0b:c1:05:e4:06:64:b2:93:7e:e8:79: d5:bf:ad:be:45:3a:0b:18:da:a1:97:7b:11:e1:68: 45:6b:3f:b0:88:d9:2e:ab:89:6b:e6:4d:15:b8:24: 51:a8:cf:6a:26:6b:89:e5:7e:74:f6:06:f4:1c:d9: e2:67:ef:85:b8:5d:53:3f:5f:a9:21:f5:80:ab:42: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:79:73:09:1D:BE:F5:20:DE:D7:2A:0D:63:06:3C:A1:1D:79:65 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.128.0/19 Signature Algorithm: sha256WithRSAEncryption b2:a0:63:36:c4:4f:e0:a1:b2:12:ec:1b:4f:20:08:26:91:e2: f6:95:4c:8f:04:0c:ba:00:93:ab:c6:d0:d4:01:c2:1f:26:01: e3:b0:d7:6e:ef:a1:6d:aa:d1:19:f4:9e:5a:b5:41:18:ff:d0: 91:9b:a4:e7:fe:79:84:39:31:ea:06:7c:e6:66:d8:1d:99:95: f0:2f:a1:62:19:6a:9c:f3:21:ce:e3:6c:97:eb:3f:f8:f4:88: 78:1d:56:16:2d:e2:b3:e9:1b:61:9a:12:47:e1:0f:73:45:f6: 3a:74:f2:12:d8:03:a0:84:a0:7c:a0:a7:76:7b:f5:5a:b6:51: 24:bf:5b:1a:30:62:8f:b5:e0:6a:34:94:c6:b5:d1:59:c5:f8: 14:b9:5b:5f:f9:c7:6c:8c:22:f1:6a:0e:5e:0d:f4:3d:bf:b3: d1:a6:e1:02:5e:63:6a:9a:bd:c0:ab:c6:6a:53:7f:99:36:d9: ad:41:5b:59:49:34:04:c4:86:2f:fc:d7:fe:52:ab:9a:3e:5c: a0:c5:a2:4b:88:63:20:9d:8c:ae:fb:81:91:4b:f5:7d:d7:32: 08:a5:57:0a:f1:0f:c1:aa:5c:4b:09:d2:74:0e:6c:0a:81:d6: 9f:e9:d4:49:24:36:22:45:0d:c8:45:3b:b6:cd:4e:a4:e6:ce: 13:0b:5a:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaF/GHjN5jm8Ge/IGrP6T5gGCc9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNDA3MDMwNDU1MDBaFw0yNTA3MDIwNTAwMDBaMDMxMTAvBgNV BAMTKDg1QTM3OTczMDkxREJFRjUyMERFRDcyQTBENjMwNjNDQTExRDc5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeH8Bc49UR0TzSa60QP4/eV2e7 xX602q0CCILK+GkXvxrVZ2N8TTtprciuDblKCnJUkKmEYRRvQEh2T9ZkgklkY2f8 UsVL1mhx4n7lo/LemLKFZyVrBNRpuY4K4ta5lEBmwqIlKm7LLYj6WYMIFkLua0gO 8ZKA8pBqrKtbgL3xSach34Wf4NdurSwfnsgiBVNpbfy6oAMWGj0JHzCTuInRBaVB TI7oSzv4nee2Yoj+XBT/9/OCM04LwQXkBmSyk37oedW/rb5FOgsY2qGXexHhaEVr P7CI2S6riWvmTRW4JFGoz2oma4nlfnT2BvQc2eJn74W4XVM/X6kh9YCrQpHxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhaN5cwkdvvUg3tcqDWMGPKEdeWUwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiNjk4MjJjLTJlMjItNDhiZS04 YmEyLTYzNGY1ODJjMmVjYi8wLzMyMzAzMjJlMzEzNTMwMmUzMTMyMzgyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzMjMzMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFypaAMA0GCSqG SIb3DQEBCwUAA4IBAQCyoGM2xE/gobIS7BtPIAgmkeL2lUyPBAy6AJOrxtDUAcIf JgHjsNdu76FtqtEZ9J5atUEY/9CRm6Tn/nmEOTHqBnzmZtgdmZXwL6FiGWqc8yHO 42yX6z/49Ih4HVYWLeKz6RthmhJH4Q9zRfY6dPIS2AOghKB8oKd2e/VatlEkv1sa MGKPteBqNJTGtdFZxfgUuVtf+cdsjCLxag5eDfQ9v7PRpuECXmNqmr3Aq8ZqU3+Z NtmtQVtZSTQExIYv/Nf+UquaPlygxaJLiGMgnYyu+4GRS/V91zIIpVcK8Q/BqlxL CdJ0DmwKgdaf6dRJJDYiRQ3IRTu2zU6k5s4TC1pO -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net